Privacy Policy - Legal Redline

1. Introduction

Legal Redline ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our contract review platform and related services.

By using Legal Redline, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Name and email address
Password (stored securely using industry-standard encryption)
Organization name and details
Billing information (processed by our payment provider, Stripe)

2.2 Documents and Content

When you use our service, we process:

Contracts and documents you upload for review
Playbooks and clause libraries you create
Notes and annotations you add during review

2.3 Usage Information

We automatically collect:

IP address and browser type
Device information and operating system
Pages visited and features used
Time and date of your visits

3. How We Use Your Information

We use the information we collect to:

Provide and maintain our contract review services
Process your documents using AI-powered analysis
Improve and personalize your experience
Communicate with you about updates, security alerts, and support
Process payments and prevent fraud
Comply with legal obligations

4. Data Security

We implement robust security measures to protect your data:

All data is encrypted in transit using TLS 1.3
Sensitive document content is encrypted at rest using AES-256
Passwords are hashed using bcrypt with appropriate cost factors
Regular security audits and vulnerability assessments
Secure session management with automatic expiration
Rate limiting to prevent abuse

5. AI Processing

When you upload documents for review, we use AI services to analyze your contracts. Important notes about AI processing:

Your documents are processed by OpenAI's API to provide analysis
OpenAI does not use your data to train their models (per their API terms)
Document content is only retained as long as necessary for processing
We do not share your documents with any other third parties for AI training

6. Data Sharing

We do not sell your personal information. We may share data with:

Service Providers: Companies that help us operate (hosting, email, payments)
Within Your Organization: Team members in your organization can access shared content
Legal Requirements: When required by law or to protect our rights
Business Transfers: In connection with a merger or acquisition

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

Account information is kept while your account is active
Documents and reviews are retained until you delete them
Audit logs are retained for 90 days for security purposes
You can request deletion of your data at any time

8. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Delete your account and associated data
Export your data in a portable format
Opt out of marketing communications

9. Cookies

We use essential cookies to maintain your session and provide our services. We do not use tracking cookies for advertising purposes. You can configure your browser to refuse cookies, but this may limit functionality.

10. Children's Privacy

Legal Redline is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a notice on our platform. Your continued use of Legal Redline after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@legalredline.com